Privacy Policy
How VectraSEO collects, uses, protects, and shares data — and what rights you have over yours.
At VectraSEO ("we," "our," or "us"), we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, website, and related services (collectively, the "Service").
Information We Collect
We collect information you provide directly to us, as well as information collected automatically when you use the Service.
- Account information: email address, name, and company details when you register.
- Project data: website URLs, competitor URLs, content preferences, and CMS credentials you provide for publishing.
- Generated content: blog posts, images, and metadata created through the Service.
- Usage data: pages visited, features used, timestamps, and interaction patterns.
- Device information: browser type, operating system, IP address, and device identifiers.
How We Use Your Information
We use the information we collect to provide, maintain, and improve the Service, including:
- Generating SEO content and publishing to your connected CMS platforms.
- Analyzing competitors and identifying content gap opportunities on your behalf.
- Communicating with you about your account, updates, and support.
- Detecting and preventing fraud, abuse, and security incidents.
- Improving our AI models and algorithms (only using aggregated, anonymized data).
CMS Credentials & Third-Party Access
When you connect a CMS platform (WordPress, Shopify, Wix, etc.), we store the API keys or OAuth tokens needed to publish content on your behalf. These credentials are encrypted at rest using AES-256 and are never shared with other users or third parties.
You can revoke CMS access at any time from your project settings. When you disconnect a CMS, we immediately delete the stored credentials.
Data Sharing & Disclosure
We do not sell your personal information. We share data only in the following circumstances:
- Service providers: AWS (hosting, compute, storage), Google (Gemini API for AI generation), and Stripe (payment processing).
- Legal requirements: when required by law, subpoena, or government request.
- Business transfers: in connection with a merger, acquisition, or sale of assets.
- With your consent: when you explicitly authorize a specific data sharing.
Data Retention
We retain your account data and generated content for as long as your account is active. Generated blog posts and images are stored in our cloud infrastructure until you delete them or close your account.
When you delete your account, we remove all personally identifiable data within 30 days. Aggregated, anonymized analytics data may be retained indefinitely for service improvement.
Security
We implement industry-standard security measures to protect your data, including encryption in transit (TLS 1.3) and at rest (AES-256), network isolation, access controls, and regular security audits. For more details, see our Security page.
Your Rights
Depending on your jurisdiction, you may have the right to:
- Access, correct, or delete your personal information.
- Export your data in a portable format.
- Object to or restrict certain processing of your data.
- Withdraw consent where processing is based on consent.
Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a prominent notice on the Service. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.
Questions about this policy?
Email us at privacy@vectraseo.com or visit our contact page. We reply within two business days.